All Categories → Security → threat-intelligence

Top 106 threat-intelligence open source projects

本项目致力于收集网上公开来源的威胁情报，主要关注信誉类威胁情报（如IP/域名等），以及事件类威胁情报。

✭ 254

python threat-intelligence

Archive of publicly available threat INTel reports (mostly APT Reports but not limited to).

✭ 252

malware threat-hunting threat-intelligence

The OSINT Omnibus (beta release)

✭ 243

python security osint threat-intelligence security-automation

A helper to run OSINT queries & manage results continuously

✭ 239

ruby osint threat-hunting threat-intelligence shodan

Elemental - An ATT&CK Threat Library

✭ 241

html threat-intelligence mitre-attack

Don't Just Search OSINT. Sweep It.

✭ 225

python osint cybersecurity malware-analysis threat-hunting threat-intelligence ransomware certificate-transparency

Personal compilation of APT malware from whitepaper releases, documents and own research

✭ 219

malware malware-analysis collection threat-hunting threat-intelligence malware-research malware-detection

Awesome Devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

✭ 2,805

devops podcast threat-intelligence devsecops

Sandia Cyber Omni Tracker (SCOT)

✭ 206

javascript perl incident-response threat-intelligence

Modules for expansion services, import and export in MISP

✭ 198

python osint threat-intelligence

MISP trainings, threat intel and information sharing training materials with source code

✭ 185

tex osint threat-intelligence threatintel

Misp Warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

✭ 184

python dfir threat-intelligence

Phishingkithunter

Find phishing kits which use your brand/organization's files and image.

✭ 177

python security phishing threat-hunting threat-intelligence

This repo contains logstash of various honeypots

✭ 163

data-science dataset samples logstash threat-intelligence malware-research honeypot threatintel

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

✭ 162

python api automation security-tools ioc vulnerability-scanners security-scanner orchestration incident-response threat-hunting threat-intelligence security-automation vulnerability-detection vulnerability-management

Detection of phishing domains and domain squatting. Supports permutations such as homograph attack, typosquatting and bitsquatting.

✭ 149

python security-tools osint phishing threat-hunting threat-intelligence

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

✭ 148

security dockerfile malware malware-analysis threat-intelligence information-security

Domain name permutation engine written in Go

✭ 148

go golang dns penetration-testing pentest-tool phishing threat-intelligence threatintel domains

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

Authors

✭ 2,165

javascript CSS security osint cybersecurity threat-intelligence intelligence cti cyber

A dashboard for a real-time overview of threat intelligence from MISP instances

✭ 142

javascript dashboard cybersecurity threat-intelligence threatintel

🚌 The missing link to connect open-source threat intelligence tools.

✭ 139

python threat-hunting threat-intelligence threatintel ids

All-in-one bundle of MISP, TheHive and Cortex

✭ 134

dfir incident-response threat-hunting threat-intelligence

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

✭ 132

c security awesome awesome-list reverse-engineering pentesting malware-analysis poc threat-intelligence cve exploits

internet monitoring osint telegram bot for windows

✭ 123

automation osint infosec cybersecurity threat-intelligence threatintel

Set of Maltego transforms to inferface with a MISP Threat Sharing instance, and also to explore the whole MITRE ATT&CK dataset.

✭ 112

python graph analysis threat-intelligence attack visualisation transform mitre-attack

Analyst Arsenal

A toolkit for Security Researchers

✭ 112

python scanner osint infosec cybersecurity malware-analysis threat-hunting threat-intelligence webshell certificate-transparency

Certstreammonitor

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

✭ 111

python threat-intelligence certificate-transparency

🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more

✭ 108

python html android linux macos windows pdf data-analysis static-analysis analysis malware-analysis ioc analyzer phishing threat-intelligence yara pcap

PatrOwl - Open Source, Free and Scalable Security Operations Orchestration Platform

✭ 105

html api automation security-tools ioc vulnerability-scanners security-scanner orchestration incident-response threat-hunting threat-intelligence security-automation vulnerability-detection vulnerability-management

Python3 library and command line for GreyNoise

✭ 100

python security threat-intelligence internet scanning

Dovehawk is a Zeek module that automatically imports MISP indicators and reports Sightings

✭ 97

threat-hunting threat-intelligence

PatrowlHears - Vulnerability Intelligence Center / Exploits

✭ 89

python api automation cybersecurity vulnerabilities threat-hunting threat-intelligence cve exploits vulnerability-detection threatintel threat

Real-time HTTP Intrusion Detection

✭ 1,248

go golang log threat-hunting threat-intelligence logs intrusion-detection ids threat

Phishing catcher

Phishing catcher using Certstream

✭ 1,232

python osint phishing threat-intelligence threatintel certificate-transparency

Signature base for my scanner tools

✭ 1,212

scanner hash ioc dfir threat-hunting threat-intelligence yara signature

Explore Indicators of Compromise Automatically

✭ 73

python security-tools cybersecurity incident-response threat-hunting threat-intelligence security-automation

Bringing you the best of the worst files on the Internet.

✭ 69

shell malware infosec cybersecurity malware-analysis threat-hunting threat-intelligence malware-research threatintel malware-detection virustotal

ioc2rpz is a place where threat intelligence meets DNS.

✭ 67

erlang dns ioc threat-intelligence dns-server blacklist

Vulnerability Data Archive

With the hope that someone finds the data useful, we periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

✭ 63

vulnerability threat-intelligence cve threatintel threat

Malware Analysis, Threat Intelligence and Reverse Engineering: LABS

✭ 55

c reverse-engineering malware-analysis threat-intelligence

Information about my experiences on ethical hacking 💀

✭ 54

python r jupyter-notebook machine-learning security hacking research machine-learning-algorithms threat-intelligence hacker

Imports Alienvault OTX pulses to a MISP instance

✭ 45

jupyter-notebook threat-intelligence threatintel

Melody is a transparent internet sensor built for threat intelligence. Supports custom tagging rules and vulnerable application simulation.

✭ 41

go threat-intelligence

Malcom - Malware Communications Analyzer

✭ 988

python malware infosec malware-analysis dfir threat-intelligence pcap

BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you

✭ 21

cybersecurity malware-analysis threat-hunting threat-intelligence

Utilities for Sysmon

✭ 903

windows monitoring logging threat-hunting threat-intelligence threatintel netsec sysmon

The Correlated CVE Vulnerability And Threat Intelligence Database API

✭ 826

python vulnerability vulnerability-scanners threat-intelligence cve exploits vulnerability-detection threatintel threat

CLI tool for open source and threat intelligence

✭ 679

python osint threat-intelligence threatintel

Kaspersky's GReAT KLara

✭ 565

threat-hunting threat-intelligence

A browser extension for OSINT search

✭ 483

typescript security chrome-extension osint threat-intelligence

The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise (IOCs).

✭ 482

javascript golang security ioc threat-intelligence

Extract and aggregate threat intelligence.

✭ 439

python security-tools osint ioc dfir threat-hunting threat-intelligence malware-research yara threatintel

PatrOwl - Open Source, Smart and Scalable Security Operations Orchestration Platform

✭ 363

html api automation security-tools ioc vulnerabilities vulnerability-scanners security-scanner orchestration incident-response threat-hunting threat-intelligence security-automation vulnerability-detection vulnerability-management scans

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

✭ 324

python security reactjs django cybersecurity incident-response threat-hunting threat-intelligence nltk watcher

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Python Iocextract

Defanged Indicator of Compromise (IOC) Extractor.

✭ 300

python library osint ioc dfir threat-intelligence malware-research yara decoding base64 threatintel

🐺 Malware analysis platform

✭ 285

python3 hacktoberfest docker flask reverse-engineering static-analysis malware self-hosted malware-analysis threat-intelligence malware-research yara binary-analysis self-hosting virustotal

Clusters and elements to attach to MISP events or attributes (like threat actors)

✭ 276

python classification malware threat-hunting threat-intelligence

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

✭ 3,124

python HTML Dockerfile dns scanner osint fuzzing phishing threat-hunting threat-intelligence domains typosquatting homograph-attack idn

1-60 of 106 threat-intelligence projects